From d4d1634bd7f0f69ee36bd168542528fd893eb9c6 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 24 Mar 2026 10:26:01 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047
- https://snyk.io/vuln/SNYK-PYTHON-FLASK-15322678
- https://snyk.io/vuln/SNYK-PYTHON-GUNICORN-6615672
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6809379
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-6002459
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
---
 requirements.txt | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 7f8e204..92f4c6a 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,19 +1,20 @@
 autopep8==1.6.0
-certifi==2022.12.7
+certifi==2023.7.22
 chardet==3.0.4
 click==7.1.2
-Flask==2.2.5
-gunicorn==21.2.0
+Flask==3.1.3
+gunicorn==22.0.0
 idna==3.7
 itsdangerous==1.1.0
-Jinja2==3.1.3
+Jinja2==3.1.4
 MarkupSafe==2.0.1
 pycodestyle==2.8.0
 python-dotenv==0.14.0
-requests==2.31.0
+requests==2.32.2
 toml==0.10.2
-urllib3==1.26.17
-Werkzeug==2.2.3
+urllib3==1.26.18
+Werkzeug==2.3.8
 colorthief==0.2.1
 pillow>=10.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
-setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability